Addition of missing audit field in 2.2.6 node item

6 years ago · 182e9b5e01
parent b502d09f8b
commit 182e9b5e01
1 changed files with 1 additions and 0 deletions
--- a/cfg/1.8/node.yaml
+++ b/cfg/1.8/node.yaml
@ -411,6 +411,7 @@ groups:

    - id: 2.2.6
      text: "Ensure that the proxy kubeconfig file ownership is set to root:root (Scored)"
+      audit: "/bin/sh -c 'if test -e $proxyconf; then stat -c %U:%G $proxyconf; fi'"
      tests:
        test_items:
        - flag: "root:root"